CVE-2007-4976: Coppermine Photo Gallery

Medium severity, CVSS 6.5. EPSS: 8.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.

Affected products

• Coppermine Coppermine Photo Gallery: version 1.4 only; version 1.4.2 only; version 1.4.4 only; version 1.4.9 only; version 1.4.10 only; version 1.4.11 only; …

Published 2007-09-19. Last modified 2026-06-16.